folks

we're bringing a data centre online shortly and i'm trying to convince our organisation of the need to secure it behind a firewall(s) cluster but i'm having some difficulty

i'm told that since applications such as AD etc use RPC & DCOM and other unpredicatable ports and there are IPsec tunnels running between us and trusted 3rd parties that a firewall is pointless

i'm still arguing for a firewall allowing rpc etc BUT between specific endpoints which should be hardened to a rigid build

has anyone seen any whitepapers on such or have any useful links or views

thabks to anyone taking the time to reply

greatly appreciated